PT-2026-34330 · Pcvisit · Pcvisit

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-0539

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions pcvisit versions 22.6.22.1329 through 25.12.3.1744

Description Incorrect default permissions in the pcvisit service binary on Windows allow a low-privileged local attacker to escalate their privileges. An attacker can overwrite the service binary with arbitrary contents, which is then automatically launched with NTSYSTEM privileges during boot.

Recommendations Update to version 25.12.3.1745.

Fix

LPE

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2026-0539

Affected Products

Pcvisit

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-0539 · Security Note
• https://twitter.com/CVEnew/status/2047012147541279062 · Twitter Post
• https://pcvisit.de/kundenbereich/release-notes · Note
• https://twitter.com/InfoGuard_Labs/status/2046967734873759936 · Twitter Post
• https://labs.infoguard.ch/advisories/cve-2026-0539_pcvisit_local-privilege-escalation · Note